Malicious code in nokire-nakaocil6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5757997a638012ee69fac67c9206bafb9b97e16491d065dcddb9d9a143669689 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahnim-satafi-anj (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e8059b7ac049a0f31ac574a6a80018d2565c99a0ea97918a996392e8b5febdc4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-fuafavi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 78267d8c9a3b938f521626ab552a8281a38dce5767aa38d4f4879227b9806ab7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in miands-minst-nuru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f2c593e537f69f0e826613574b64f37f3ff5b6577bb408c6b9dd8fc6087c124 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in munuafai-safif-cafguis (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 58eadf5cc030cc3b14627f1566fbe8ea505dfa9ded682e4e61200eb4edc1d0f7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahu-sautuga-infarudui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7e3668b860c6a00933c325e7cf283c1b0a5ff929b983e0e23ceac9664ed3c2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mufai-suffi-cagasufai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57620ac9350095f2d4011cced5a9c577ea8809131d3c2f81a689ad7b7452acb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in poglymer-ogaih-gac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4133c9df6e14d6c9dab9979f03b9fa0f8408b9813572cb44ccff84a2698602d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke19 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b90334e7c4e59372f4fa1e7ff350940e71b04b2b22b098683df5f48c195795f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-soni-farvadvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b4d9eec3c8383412bad75c82dfea73ac69790d96b0ea5bc2a6438d1b569950e9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139570

Malicious code in nuilva-bavam-madivabunav npm...

Malicious code in polymer-datdfadsid-dfadr (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ad96207a9394ee1ac2ed28c57d37c2873bcd32c41f3f44d635f7c83cbec61e3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in goodafin-nuiyag-gifu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 90c65742897b306ae591e089209f952552f52a70991d9ca77b92289f38bb3be0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in nuilva-bavia-munvda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b38f10557933c09c94195b2470a7b0be5142383d678aa2aa087e522fbc7410c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-ukutila-jok (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b81fd739cb8751964bc9bf647d048e4481c52ea3ebbdc76a9955c1b4a20261e1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in gas-ndutar-munst (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4282f66e3d7c86b429854fcee401c31f4351c074e524055c4de9593632995bb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-iutup-nusdy (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 951e22bb423fec98be2560c57e2d0e969db550395c76df4a961e8babcbf54538 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buta-fs0boina-gauafiooifa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 478cdc395c8eb50e97e46397d940b369988c858411481fc83087dcb23e416069 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hunim-satu-aniun (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3016b52e4fae821ecb06383a9dfbd52985fcd93026e09fc04967e720ffb741bf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tearich-ralat4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9778d17ba1789a4e7ced6d528195b47ea3b6d86a4435d6594fc6f59726c377e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...